Take a look at the open source project Keycloak (http://www.keycloak.org/ http://www.keycloak.org/), it does exactly that and takes very little time to setup. T

Take a look at the open source project Keycloak (http://www.keycloak.org/ http://www.keycloak.org/), it does exactly that and takes very little time to setup. The easy way is pretty much: 1. Run the docker container (https://hub.docker.com/r/jboss/keycloak/) 2. Login to the web console 3. Create a "Realm" 4. Go to "User Federation" and add a "LDAP" provider 5. Go to "Clients" and configure keycloak to handle OpenID/SAML for your app Disclaimer: I work for Red Hat, and Keycloak is one of our projects. If you want support, we recently released it as RH SSO.